Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa
File:                     4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa (raw, json)
Hash identifier:          gakv7alORJAgC3JfRyiFISulbE6KC9BtiQriJUF5V58=
Subject key identifier:   C8:27:B6:7C:2B:AD:4A:9F:91:3A:3B:5C:7C:A3:87:26:10:D7:3F:56
Certificate issuer:       /CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
Certificate serial:       010D0C9F4328584E1E4455F1D5F200EF45EBBA00
Authority key identifier: BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa
Signing time:             Tue 09 Jun 2026 21:00:12 +0000
ROA not before:           Tue 09 Jun 2026 21:00:12 +0000
ROA not after:            Mon 07 Sep 2026 21:00:12 +0000
asID:                     38047
IP address blocks:        2602:f83b:54::/48 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 15 Jun 2026 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4e:1e:44:55:f1:d5:f2:00:ef:45:eb:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c898c122-b98e-4ce4-95b4-fe5f25fdd261
        Validity
            Not Before: Jun  9 21:00:12 2026 GMT
            Not After : Sep  7 21:00:12 2026 GMT
        Subject: CN=e601cac1-e5c0-4819-adbf-8f528a632fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:8b:52:6f:28:69:7d:38:b5:4a:9e:89:17:a0:
                    c0:7f:25:da:0c:fd:53:c2:5c:71:90:d0:fb:3d:53:
                    37:25:1c:4a:2d:ee:3b:b1:75:0f:ec:98:e2:a6:99:
                    d7:f0:6a:ce:b2:46:17:52:5a:f8:80:1d:ca:22:b9:
                    63:55:b7:fd:62:ec:ee:b7:13:3b:c1:48:8b:fe:34:
                    23:5f:df:73:d9:0a:c1:d2:47:31:f4:02:62:de:66:
                    42:eb:d3:ad:3b:76:dd:d1:71:90:f0:94:90:27:3b:
                    e0:e5:9e:5e:ee:86:2a:3c:b9:24:37:e4:62:a7:df:
                    34:1f:21:de:cd:1d:37:f6:4a:e6:b6:94:2b:30:72:
                    9d:8b:8d:39:05:f4:d5:f9:a8:09:84:0c:0e:b8:65:
                    fe:d4:0e:6a:d1:50:38:bc:38:b5:d4:ad:16:ec:10:
                    a6:23:bf:33:0a:a3:3c:fd:a6:14:a3:b3:c0:30:2b:
                    bb:b8:cf:56:f2:0a:2c:9f:0a:37:86:91:c6:58:e0:
                    47:4a:6c:97:1a:56:c3:c1:d0:83:e4:84:1b:74:c1:
                    ed:ca:e8:df:bf:24:9d:9b:14:e5:3b:56:9e:d7:31:
                    b5:2b:ad:c1:68:9d:a1:27:0e:01:0b:26:f1:02:05:
                    bb:1b:eb:c6:28:0e:78:6d:97:86:03:0c:d1:53:1c:
                    09:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:27:B6:7C:2B:AD:4A:9F:91:3A:3B:5C:7C:A3:87:26:10:D7:3F:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/4a6b6451-8445-3cbd-8767-c10ab07c9f40.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261/c898c122-b98e-4ce4-95b4-fe5f25fdd261.crl

            X509v3 Authority Key Identifier:
                keyid:BF:BD:22:C6:52:94:69:9B:E6:2D:47:97:CC:1B:CD:9B:BF:2E:34:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c898c122-b98e-4ce4-95b4-fe5f25fdd261.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:f83b:54::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:8d:34:4d:e1:bc:fe:6a:01:82:b8:7c:5a:72:ae:68:37:0d:
         8a:3b:e4:1d:ad:88:e1:e2:d1:df:f8:76:5d:eb:9f:3f:47:15:
         23:a3:4f:07:94:a6:60:09:c6:ba:54:e7:e5:fa:1f:a5:8f:d6:
         8e:0f:27:69:58:37:da:79:c1:5f:73:f3:70:86:67:89:7d:68:
         b3:5c:c2:b7:d5:31:1a:07:46:32:c4:58:46:33:b5:9e:f3:bb:
         db:3c:9e:0c:63:f7:68:c6:f1:34:54:56:51:88:bb:89:66:10:
         11:c9:3c:18:e5:97:69:d2:22:18:76:9f:7e:41:45:50:f3:a2:
         9e:07:0a:d3:d3:82:3e:74:31:45:db:cc:43:c0:4f:08:ab:6d:
         10:cb:9d:ec:50:56:6a:ab:ac:35:f7:eb:4a:c3:a8:93:f5:16:
         12:ec:1c:3a:77:ef:51:04:f0:bc:23:4f:85:8b:d6:d3:a2:b4:
         b4:77:cb:e4:66:d0:86:09:7a:fe:17:6b:bd:8f:80:4d:61:c1:
         a3:b9:65:88:ca:e3:62:2a:06:08:dd:00:0b:42:f3:23:cc:62:
         33:b6:10:7d:74:9a:75:8b:4e:42:1b:b3:6a:f6:d7:ee:c3:c4:
         e1:86:34:f9:5b:81:71:cc:43:f2:86:79:a7:7d:b1:10:3b:80:
         93:27:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:14:32 2026 by rpki-client